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ABSTRACT 



A system manages communications between a user and a 
network by receiving a user request for access to a network 
file during a user network connection session with a con- 
necting network, determining whether the user has a con- 
nected user session state or a disconnected user session state 
with respect to a portal server, responding to a disconnected 
user session state by determining a user identity that speci- 
fies a physical location for the user and providing the user 
with a redirected page for display in a user graphical 
interface program in accordance with the determined user 
physical location user identification and in accordance with 
service selection information, and then changing the user 
session state to a connected state, and responding to a 
connected user session state by routing the user request for 
access to the network file to a network server. The system 
thereby controls user access to web pages, but does not 
require any specialized client-side software, and permits 
different content to be delivered according to the location of 
the user who will receive it. 

34 Claims, 4 Drawing Sheets 
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FORCED NETWORK PORTAL 

CROSS-REFERENCE TO RELATED 
APPLICATIONS 

This application is a continuation of Ser. No. 09/288,880 
filed Apr. 9, 1999, now U.S. Pat. No. 6,460,084. 

This application is a continuation in -part of U.S. appli- 
cation Ser. No. 09/057,028 filed Apr. 8, 1998 U.S. Pat. No. 
6,286,039, which is a continuation of U.S. application Ser. 
No. 09/033,443 filed Mar. 2, 1998 U.S. Pat. No. 6,128,601, 
which itself is a continuation of U.S. application Ser. No. 
08/919,397 filed Aug. 28, 1997 U.S. Pat. No. 5,987,430. 

BACKGROUND OF THE INVENTION 
L Field of the Invention 

This invention relates generally to computer networks 
and, more particularly, to computer communication with 
networks. 

2. Description of the Related Art 

Access to the Internet is becoming increasingly popular 
with the general public. Users gain access through a variety 
of means, including personal Internet service providers 
(ISP's) and high speed network connections through office 
systems, or fiber optic cable such as so-called cable 
modems, or high speed digital lines such as ISDN or xDSL 
lines. It is becoming increasingly important to support user 
access at all times, even as people travel away from their 
home and office. In addition to commercial ISP's, who are 
in business solely to provide Internet access, many compa- 
nies or institutions provide Internet access to employees, 
clients, or customers. For example, hundreds of users may 
be connected by an office system, or by university networks, 
or hotel systems for guests. Typically, a user will view 
Internet content through a graphical browser application, 
such as "Navigator" by Netscape Communications Corp. or 
"Internet Explorer" by Microsoft Corporation. Such brows- 
ers are especially proficient at retrieving graphical Internet 
pages (files) from the "World Wide Web" (WWW) and 
displaying a combination of images, moving video, and 
audio. 

The web page that is displayed when such browser 
programs are launched can typically be selected by the 
individual user. Such a page is referred to as a "home" page. 
Because the home page is displayed each and every time the 
browser program is launched, it has not escaped the attention 
of advertisers that there is a built-in audience for viewing ad 
content. As a result, many commercial enterprises have 
spent thousands of dollars designing web pages that users 
might find desirable enough to designate as their home page. 
Such a page becomes a jumping off point for the user during 
Internet access. Such web sites are referred to as "portal" 
sites. 

As with magazine circulation, the ad cost (or value of) a 
portal site depends largely on the number of viewers that the 
site experiences. As a result, some Internet access providers 
have highly valued operations. For example, the America 
On-Line (AOL) service operates a proxy server, so that all 
AOL subscribers gain access to the Internet only through the 
AOL link. This means that all AOL users see the same home 
page, or portal site, which therefore can be valued for the 
delivery of ad content. The proxy server system, however, 
requires special purpose access software to be installed on 
the user computer, and also requires a large investment in 
infrastructure by the service provider. Moreover, despite 
having immense amounts of demographic data on 
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subscribers, the home page displayed to subscribers is not 
generally adapted for the specific subscriber who is logging 
in. 

Other portal sites are generally web sites with specialized 

5 content. For example, many Internet search engine and 
indexing services urge Internet users to adopt their respec- 
tive home pages as a portal site. Some of these services 
include Yahoo, Excite, and Alta Vista. Other companies have 
developed their respective company home pages as portal 

30 sites for Internet users. Examples of these sites include 
Netscape Communications Corp., Microsoft Corp., and spe- 
cialized services such as "Sidewalk" travel information and 
"ZD Net" computer publications and information. 

One advantage of such portal sites is that they do not 

15 require any action by the user beyond pointing their browser 
to the site. There is no special access software or equipment 
to install, and the operation of the user's computer is not 
changed. Thus, the content provider does not need to invest 
in excessive infrastructure or distribution of special soft- 

20 ware. Portal sites such as these web pages, however, do not 
offer particularized content. That is, all users see the same 
display page upon visiting the web site. The value of such 
portal sites would increase significantly if the presentation to 
users could be customized for each user. This would enable 

25 targeted advertising to be delivered. 

Some sites can somewhat customize their presentation by 
storing user information, such as by maintaining "cookies" 
on the user's computer. When the user visits the portal web 

30 site, the web site server obtains information from the cookie 
and adjusts the information sent to the user for display. 
Examples of such modified web presentations include, for 
example, news sites such as MSNBC. While such tech- 
niques permit some amount of customizing the display, user 

35 viewing is entirely voluntary. That is, users may register 
with such sites to obtain particular information that they 
have preselected, but they are in no way obligated to visit 
such sites after registering. It would be more advantageous 
to content developers and advertisers if they could have 

4Q assurance that certain users would be forced to view their 
sites when accessing web pages over the Internet. 

From the discussion above, it should be apparent that 
there is a need for an Internet access technique that controls 
user access to web pages but does not require any special- 

45 ized client-side software, and permits different content to be 
delivered according to the user who will receive it. The 
present invention fulfills this need. 

SUMMARY OF THE INVENTION 

50 The present invention provides a network in which com- 
munications between a user and a network are provided by 
receiving a user request for access to a network file during 
a user network connection session with a connecting 
network, determining whether the user has a connected user 

55 session state or a disconnected user session state with 
respect to a portal server, responding to a disconnected user 
session state by determining a user identity that specifies a 
physical location for the user and providing the user with a 
redirected page for display in a user graphical interface 

60 program in accordance with the determined user physical 
location identification by username entry and in accordance 
with service selection information, and then changing the 
user session state to a connected state, and responding to a 
connected user session state by routing the user request for 

65 access to the network file to a network server. 

Other features and advantages of the present invention 
should be apparent from the following description of the 
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preferred embodiment, which illustrates, by way of 
example, the principles of the invention. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a representation of a computer network system 
with one or more client computers that gain access to the 
Internet through a portal server constructed in accordance 
with the present invention. 

FIG. 2 is a block diagram of the portal server computer 
illustrated in FIG. 1. 

FIG. 3 is a flow diagram that illustrates the processing 
steps executed by the computer system of FIG. 1 to provide 
the forced portal in accordance with the invention. 

FIG. 4 is a representation of the user table maintained by 
the portal server illustrated in FIG. 1. 

FIG. 5 is a representation of a display on the client 
computer before the user has established a connection 
through the portal server of FIG. 1. 

FIG. 6 is a representation of a display on the client 
computer showing the forced portal page from the portal 
server of FIG. 1. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENT 

FIG. 1 illustrates an exemplary computing system 100 
constructed in accordance with the present invention. The 
system includes one or more client computers 102, 104 that 
are connected to the Internet 106 through a connecting 
network 108. When a user at a client computer wants to view 
a web page, the user sends a message to the connecting 
network that requests the web page. In accordance with the 
invention, a portal server 110 intercepts the user's page 
request between the connecting network 108 and the Internet 
106. The portal server determines whether or not the user has 
already connected through the portal. If the user has 
connected, then the portal routes the user request to the 
Internet, where the request is delivered to an appropriate 
information source 112, 114 so the requested page can be 
returned to the original user 102, 104. If the user has not 
previously connected through the portal, then the portal 
determines the exact physical location of the user and 
provides the user with a redirected page for display in a user 
graphical interface program, based on the physical location 
user identity and on service selection information. The portal 
server then changes the user session state to show that the 
user is connected, and then routes the user request for the 
web page to the Internet and the information sources 112, 
114. In this way, the portal server 110 forces a portal display 
page to be viewed at the user 102, 104 until the user is 
deemed connected. 

It should be noted that the portal server 110 has great 
flexibility in terms of the type of connecting network with 
which it can interface. For example, the connecting network 
108 can comprise a local area network (LAN) at a particular 
site, such as at an office suite, hotel, multiple office business, 
or other network computer installation. Such a connecting 
network can make use of independent means of gaining 
Internet access, such as through ISP's with high-speed 
digital connections or conventional analog telephone lines. 
Alternatively, the connecting network 108 can itself be an 
ISP's user base. That is, the client computers 102, 104 may 
comprise the subscribers to an ISP, and the ISP can route all 
of its subscriber Internet traffic through the portal server 110. 
In this way, the ISP can force any home page it desires on 
its subscribers, user-by-user, with a different home page for 
each, if desired. 
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FIG. 2 is a block diagram of an exemplary computer 200 
that is used as the portal server 110 (FIG. 1). It should be 
understood that any of the other computers at the clients 102, 
104 or at the information sources 112, 114 can have a similar 

s construction. The information sources 112, 114 for example 
can comprise network file servers that route web pages along 
the Internet, or can comprise e-mail servers or file transfer 
(ftp) servers. Similarly, the client computers 102, 104 can 
have a variety of computer configurations. 

10 The computer 200 operates under control of a central 
processor unit (CPU) 202, such as a "Pentium" micropro- 
cessor and associated integrated circuit chips, available from 
Intel Corporation. A user or operator at the portal server 
computer 200 can input commands and data from a key- 

15 board and display mouse 204, and can view inputs and 
computer output at a display 206. The display is typically a 
video monitor or flat panel display. The CPU 202 operates 
under control of programming steps that are stored, 
temporarily, in memory 208 to the computer. The computer 

20 also contains non-volatile data store 209, such as hard disk 
storage. Each computer communicates with the Internet and 
other networks, such as the connecting network, through a 
network interface 210 that enables communication over a 
connection 212 between the computer 200 and each network 

25 108, 106 (FIG. 1). The computer also can receive computer 
instructions, or data, from a storage media reader 214. The 
storage media reader 214 receives storage media 216, from 
which it can read stored information. The storage media can 
comprise floppy diskettes or CD-ROM discs. That is, the 

3 Q storage media can contain program steps that are read into 
the memory 208 and are then executed by the CPU to 
perform a method for providing Internet access as described 
above. The storage media thereby comprises a program 
product that embodies: program steps received by the CPU. 

35 FIG. 3 is a flow diagram that illustrates the processing 
steps executed by the computer processing system 100 of 
FIG. 1 to implement the Internet access technique in accor- 
dance with the present invention. In the first step, repre- 
sented by the FIG. 3 flow diagram box numbered 302, the 

40 user connects to the local network. This connection may be 
through a local area network (LAN) that uses the TCP/IP 
protocol. 

After the user is connected to the local network, the user 
launches a browser program, such as "Navigator" by 

45 Netscape Communications, Inc. or "Internet Explorer" by 
Microsoft Corporation. This step is represented by the flow 
diagram box numbered 304. Next, the user requests an 
Internet page, as indicated by the FIG. 3 flow diagram box 
numbered 306. Thus far, the steps have been entirely con- 

50 ventional techniques for connecting to the Internet and 
viewing pages at sites on the "World Wide Web". Those 
skilled in the art will understand that the user request for a 
web page comprises an Internet protocol "GET" message 
that is generated by a user's browser and is sent along the 

55 Internet to the actual server where the web page resides, 
where the page is retrieved and returned to the user for 
viewing. The user request is passed along by each server or 
router located between the user and the server where the web 
page resides. In this way, the user request is eventually 

60 satisfied so that the web page (or file) is retrieved for the user 
and the user can view the requested web page. Thus, the 
processing of box 306 involves a user browser at a client 
computer generating an Internet "GET" message. 

In the next processing step for the access technique in 

65 accordance with the invention, the portal server intercepts 
the user page request and determines the user session state. 
In particular, the portal server maintains a secure user 
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database that stores user identification (User ID), a port page being displayed at the user's browser. The page to be 
identification (Port ID), a physical location (Physical ID), displayed is the portal page that is being forced at the user's 
and a Session State for each user who is on a local network browser. The portal server sends a portal page that has 
that accesses the Internet through the portal server. When the content that is customized to the user's physical location, 
portal server intercepts the GET message, the portal server 5 Selection of content displayed can also be based on user 
checks the user database, finds the user identified as the identification and service selection options. This provides 
source of the GET message, and determines the user session greater flexibility in tailoring the messages, advertising, or 
state. This processing step is represented by the FIG. 3 flow other content that will be presented to the user. For example, 
diagram box numbered 308. referring to FIG. 4, all persons who are guests at the 
FIG. 4 is a representation of the user table 400 stored in 10 "Downtown Hotel" may receive a different forced portal 
the memory or data store of the portal server. The user table P a ge from the one received by a user at the "Front Office- 
includes columns for User ID 402, Port ID 404, Physical ID or received by residential customers. Even within a hotel or 
406, and Session State 408. An optional Service Selection office, the system described can be tailored down to the 
column 410 permits some customization of the user's Inter- individual physical location, so that people in adjacent 
net experience, as described further below. Each row of the 15 offices or rooms could potentially have different forced 
user table corresponds to a different client computer and portal pages. 

user. Data in the FIG. 4 table is for purposes of illustration After the portal server sends the forced portal redirected 

only. As explained more fully below, the Port ID and page for display, the portal server next changes the session 

Physical ID are known to the portal server only for users state for the user in its table (FIG. 4) from "Disconnected" 

who have connected through the portal server. Therefore, the 20 to "Connected". For every page request thereafter, when the 

user in FIG. 4 who is not connected has no data in the Port portal server intercepts the request at box 308, the user's 

ID and Physical ID columns. Thus, if the portal server request will be routed directly to the Internet after the portal 

intercepts a GET message that identifies the page requester server confirms that the user has already been connected, 

as "Guest Jim", the portal server can easily determine that Thus, every user will be forced to view the forced portal 

"Guest Jim" is using the client computer at Port 82, in Room 25 display page once during an Internet session. Normal pro- 

203 of the Downtown Hotel (D. Hotel), and has already cessing therefore returns to box 306, where the user can 

connected through the portal server. continue requesting Internet pages. 

Returning to the flow diagram of FIG. 3, after box 308, the As noted above, all users who are connecting through the 

portal server next takes different action depending on portal server for the first time in a session will have their 

whether it found the requesting user to be connected, as 30 session status checked. If a user is not connected, then the 

indicated by the decision box 310. If the portal server server portal processing of box 320 can include displaying 

determines that the requesting user has already connected, a query to the user to determine if the user wants to be 

an affirmative outcome at the decision box, then the portal connected to the portal server. Such a display is illustrated 

server routes the user web page request to the Internet and by the display representation of FIG. 5, which shows a 

its collection of routers and servers. The page is then 35 conventional browser window 500 in which a dialogue box 

returned to the user, following usual Internet protocols and 502 is shown, inquiring whether to connect through the 

routing. This processing is represented by the flow diagram portal server. It should be understood, however, that a 

box numbered 312. Next, as indicated by the flow diagram negative response by the user to the query (do not connect 

box numbered 314, the portal server ensures that the user is through the portal server) will result in a halt to the Internet 

provided with Internet access according to service selection 40 connection. As noted, every user will be forced to view the 

information. For example, the user may have indicated that selected portal page once during an Internet session, 

certain web sites are not to be available to anyone at that If a user connects to the Internet through the portal server, 

Physical ID. This may be especially valued by parents who then as noted above, the forced portal page can be selected 

want to restrict the sites to which children may visit. In this according to specific and precise user characteristics. An 

way, the Service Selection column of the User Table permits 45 exemplary forced portal page is illustrated in FIG. 6. As 

the portal server to act as a local network firewall and control illustrated, the forced portal page permits users to link to, for 

the user's Internet experience. After the portal server routes example, local location information. Other features that can 

the user requests in accordance with the service selection be provided on a forced portal page are links to a Service 

information, the system continues with normal operation. Selection page and to an Authorization and Identification 

Returning to the FIG. 3 decision box 310, if the portal 50 page. These pages provide a form interface that collects the 

server determines that the web page requesting user is not information needed to modify Internet access through the 

connected, a negative outcome at the decision box, then the portal server, following authentication of user permission, 

portal server sends a "Redirected page" message to the user, For example, a user can specify that a particular network 

to obtain the user physical location. For the conventional access provider can be used. These features permit the 

Internet protocols, this may comprise an "SNMP Query" 55 Internet service provider, whether providing Internet access 

message, which will be familiar to those skilled in the art for employees in an office or a hotel or an entire city, to 

without further explanation. The "redirected page" process- highly customize the Internet experience, 

ing is represented by the flow diagram box numbered 316. The present invention provides a customized portal site to 

In accordance with IP processing, the redirected page results regulate Internet access and ensure that users must ail go 

in the user's local connection network sending the portal 60 through a forced portal display page. Because all users who 

server the user physical location information. This process- gain access to the Internet must go through the portal server, 

ing step is represented by the flow diagram box numbered the forced portal page can be used for ad placement and the 

318. Next, the portal server sends another redirected page to like, to ensure exposure. In this way, the network commu- 

the user and the local network, as indicated by the flow nication scheme permits a greater customization for a user's 

diagram box numbered 320. 65 Internet experience. 

Unlike the earlier Redirected message, however, the sec- The present invention has been described above in terms 

ond Redirected message, produced at box 320, results in a of a presently preferred embodiment so that an understand - 
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ing of the present invention can be conveyed. There are, 
however, many configurations for network communication 
systems not specifically described herein but with which the 
present invention is applicable. The present invention should 
therefore not be seen as limited to the particular embodi- s 
ments described herein, but rather, it should be understood 
that the present invention has wide applicability with respect 
to network communication through portals generally. All 
modifications, variations, or equivalent arrangements and 
implementations that are within the scope of the attached 10 
claims should therefore be considered within the scope of 
the invention. 
We claim: 

1. A method of providing communication between a user 
and a network, the method comprising: 15 

receiving a user request for access to a network file during 
a user network connection session with a connecting 
network; 

determining whether the user has a connected user session 
state or a disconnected user session state with respect to 20 
a portal server; 

responding to a disconnected user session state by deter- 
mining a physical location for the user, providing the 
user with a redirected page for display in a user 
graphical interface program in accordance with the 
determined user physical location, and changing the 
user session state to a connected state; and 

responding to a connected user session state by routing 
the user request for access to the network file to a 30 
network server. 

2. A method as defined in claim 1, wherein responding to 
a disconnected user session state comprises providing the 
user with a redirected display page having authorization and 
identification forms that define a service selection. 35 

3. A method as defined in claim 1, wherein responding to 
a disconnected user session state comprises providing the 
user with a redirected display page having authorization and 
identification forms that specify a network access provider. 

4. A method as defined in claim 1, wherein the network 40 
communications protocol comprises the Internet protocol 
(IP) and the step of receiving a user request for access to a 
network file comprises intercepting a user network GET 
request for a page file from a network server. 

5. A method as defined in claim 4, wherein the portal 45 
server maintains a user IP address table containing session 
states for each user and determines the user session state by 
examining the user's entry in the IP address table. 

6. A method as defined in claim 5, wherein the step of 
determining a physical location for a disconnected user state 50 
comprises the portal server sending an IP redirect page that 

is not displayed by the user's browser but contains an SNMP 
query that obtains from the connecting network the physical 
location of the user. 

7. A method as defined in claim 6, wherein the step of 55 
providing the user with a redirected page for display in a 
user graphical interface program comprises displaying a 
forced portal page as the redirected page. 

8. A method of providing communication between a user 
and a network, the method comprising: 60 

intercepting a network request for a network file from a 
network server at a portal server in order to identify a 
connection state of the user; 

responding to a disconnected connection state by sending 
the user a redirected query page that identifies the 65 
physical location of the user, determining a redirected 
portal page in accordance with the user physical 



location, sending the user the redirected portal page, 
and changing the user connection state to connected; 
and 

responding to a connected connection state by routing the 
original network request to a network server and 
thereby providing the user with access to the requested 
network file. 

9. A method as defined in claim 8, wherein the network 
communications protocol comprises the Internet protocol 
(IP) and the step of receiving a user request for access to a 
network file comprises intercepting a user network GET 
request for a page file from a network server. 

10. A method as defined in claim 9, wherein the portal 
server maintains a user IP address table containing session 
states for each user and determines the user session state by 
examining the user's entry in the IP address table. 

11. A method as defined in claim 10, wherein identifying 
the physical location for a disconnected user state comprises 
the portal server sending an IP redirect page that is not 
displayed by the user's browser but contains an SNMP query 
that obtains from the connecting network the physical loca- 
tion of the user. 

12. A method of providing communication between a user 
and a network, the method comprising: 

connecting the user to a local connecting network; 
generating a network request at the user for access to a 

network file stored at a network server; 
intercepting the network request at a portal server and 

determining the connection state of the user; 
responding to a disconnected user state by: 

sending the user a redirected query page that will 
identify the physical location of the user; 

determining a redirected portal page in accordance with 
the user physical location; 

sending the user the redirected portal page; and 

changing the user connection state to connected; and 
responding to a connected user state by routing the 

original network request to a network server and 

thereby providing the user with access to the requested 

network file. 

13. A server that manages access by a user to a network, 
the server comprising a computer including: 

a central processing unit that communicates with network 
information sources; and 

memory that contains programming instructions executed 
by the central processing unit to cause the computer to 
perform steps such that it receives a user request for 
access to a network file during a user network connec- 
tion session with a connecting network, determines 
whether the user has a connected user session state or 
a disconnected user session state with respect to a 
portal server, responds to a disconnected user session 
state by determining a physical location for the user and 
providing the user with a redirected page for display in 
a user graphical interface program in accordance with 
the determined user physical location, and changing the 
user session state to a connected state, and responds to 
a connected user session state by routing the user 
request for access to the network file to a network 
server. 

14. A server as defined in claim 13, wherein the server 
responds to a disconnected user session state by providing 
the user with a redirected display page having authorization 
and identification forms that define a service selection. 

15. A server as defined in claim 13, wherein the server 
responds to a disconnected user session state by providing 
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the user with a redirected display page having authorization session states for each user and determines the user session 

and identification forms that specify a network access pro- state by examining the user's entry in the IP address table, 

vider. 25. A program product as defined in claim 24, wherein the 

16. A server as defined in claim 13, wherein the network method step of determining a physical location for a dis- 

communications protocol comprises the Internet protocol 5 connected user state comprises the portal server sending an 

(IP) and the server receives a user request for access to a IP redirect P a S e mat * not displayed by a user's browser but 

network file by intercepting a user network GET request for contau3S ™ SNM . P q uerv l . hat °^ tains from ^ connecting 

a page file from a network server. network the physical locaUon of the user. 

17 A server as defined in claim 16, wherein the server 26. Aprogram product as defined in claim 25 wherein the 

. t . m jj * ui * • * * * * method step of providing the user with a redirected page for 

maintains a user IP address table ^containing session states 10 ^ u ^ ^ m J ^ 

for each user and determines the user session state by flaying a forced portal page as the redirected page, 

examining the user s entry m the IP address table. 2? ^ apparatus for providing communication between a 

18. A server as defined m claim 17, wherem the server user and a network) tne apparatus comprising: 
determines the physical location for a disconnected user me ans for receiving a user request for access to a network 
state by sending an IP redirect page that is not displayed by is file a }JS ^ T network connection session with a 
the user's browser but contains an SNMP query that obtains connecting network; 

from the connecting network the physical location of the means for determining whether the user has a connected 

user - user session state or a disconnected user session state 

19. A server as defined in claim 18, wherein the server w j m respect to a portal server; 

provides the user with a redirected page for display in a user 20 means for responding to a disconnected user session state 
graphical interface program by displaying a forced portal by determining a physical location for the user, pro- 
page as the redirected page. viding the user with a redirected page for display in a 

20. A program product for use in a computer system that ^ CT graphical interface program in accordance with the 
executes program steps recorded in a computer-readable determined user physical location, and changing the 
media to perform a method for providing communication 25 ^ CT session s t a te to a connected state; and 
between a user and a network, the program product com- means for resporjdirig t0 a connected user session state by 
prising: routing the user request for access to the network file to 

a recordable media; and a network server. 

a program of computer-readable instructions executable 28. The apparatus as defined in claim 27, wherein the 

by the computer system to perform method steps com- 30 means for responding to a disconnected user session state 

prising: comprises means for providing the user with a redirected 

receiving a user request for access to a network file display page having authorization and identification forms 

during a user network connection session with a that define a service selection. 

connecting network; 29. The apparatus as defined in claim 27, wherein the 

determining whether the user has a connected user 35 means for responding to a disconnected user session state 

session state or a disconnected user session state with comprises means for providing the user with a redirected 

respect to a portal server; display page having authorization and identification forms 

responding to a disconnected user session state by that specify a network access provider. 

determining a physical location for the user, provid- 30. The apparatus as defined in claim 27, wherein the 

ing the user with a redirected page for display in a 40 network communications protocol comprises the Internet 

user graphical interface program in accordance with protocol (IP) and the means for receiving a user request for 

the determined user physical location, and changing access to a network file comprises means for intercepting a 

the user session state to a connected state; and user network GET request for a page file from a network 

responding to a connected user session state by routing server. 

the user request for access to the network rile to a 45 31. The apparatus as defined in claim 30, wherein the 

network server. portal server maintains a user IP address table containing 

21. A program product as defined in claim 20, wherein session states for each user and determines the user session 
responding to a disconnected user session state comprises state by examining the user's entry in the IP address table, 
providing the user with a redirected display page having 32. The apparatus as defined in claim 31, wherein the 
authorization and identification forms that define a service 50 means for determining a physical location for a disconnected 
selection. user state comprises means for sending an IP redirect page 

22. A program product as defined in claim 20, wherein that is not displayed by the user's browser but contains an 
responding to a disconnected user session state comprises SNMP query that obtains from the connecting network the 
providing the user with a redirected display page having physical location of the user. 

authorization and identification forms that specify a network 5S 33. The apparatus as defined in claim 32, wherein the 

access provider. redirected page for display in a user graphical interface 

23. Aprogram product as defined in claim 20, wherein the program comprises a forced portal page. 

network communications protocol comprises the Internet 34. The apparatus as defined in claim 27, wherein the 

protocol (IP) and the step of receiving a user request for redirected page for display in a user graphical interface 

access to a network file comprises intercepting a user 60 program is further in accordance with user identification and 

network GET request for a page file from a network server. service selection information. 

24. Aprogram product as defined in claim 23, wherein the 

portal server maintains a user IP address table containing ***** 
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